Privacy Policy

1. Information we collect

We collect the information you provide and information generated as you use Baza:

• Account data — name, email address, phone number and password when you register as a Client or Owner.
• Identity & verification (KYC) — national ID or passport details, and documents you submit so we can verify your identity before you list or transact.
• Listing data — details of properties, vehicles and land you post, including UPI, VIN, location, price and photos.
• Transaction data — applications, digital contracts, payment records and mobile-money/card references.
• Usage & device data — IP address, browser type, pages viewed and interactions, collected via cookies and similar technologies.

2. How we use your information

• Create and manage your account and verify your identity (KYC).
• Publish and moderate listings, and connect Clients with Owners.
• Generate digital contracts (eContracts) and enable phone-OTP eSigning.
• Process payments through mobile money (MTN, Airtel) and card providers, and issue receipts.
• Operate the trust layer — reviews, reputation scores and dispute handling.
• Detect, prevent and investigate fraud, abuse and violations of our Terms.
• Send you service messages and, where you consent, updates and offers.

3. Legal basis for processing

Under Law N° 058/2021, we process your personal data on the basis of: your consent; the performance of a contract with you; compliance with a legal obligation; and our legitimate interests in operating a safe, trustworthy marketplace, provided these do not override your rights and freedoms.

4. Sharing and disclosure

We do not sell your personal data. We share it only as needed:

• With other users — when you apply, list or transact, relevant details are shared with the counterparty.
• Payment providers — MTN MoMo, Airtel Money and card processors to complete transactions.
• Service providers — hosting, storage, identity-verification and communication partners bound by confidentiality.
• Authorities — where required by law, court order, or to protect rights, safety and property.

5. Mobile money & payment data

Payments are processed by licensed providers. Baza does not store full card numbers. Mobile-money transactions are handled through the provider’s secure APIs; we retain only the references needed to confirm payment, issue receipts, and manage escrow and refunds.

6. Data retention

We keep your personal data only for as long as necessary to provide our services and to meet legal, accounting and dispute-resolution obligations. When data is no longer needed, we delete or anonymise it.

7. Your rights

Subject to Rwandan law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, where applicable.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time, without affecting prior lawful processing.

8. Data security

We use technical and organisational measures — including encryption in transit, access controls and hashed passwords — to protect your data. No system is perfectly secure, but we work continuously to safeguard your information and will notify you and the relevant authority of a qualifying breach as required by law.

9. Cookies

We use essential cookies to keep you signed in and remember preferences such as your language, and analytics cookies to understand and improve the service. You can control cookies through your browser settings; disabling some may affect functionality.

10. Children

Baza is intended for users aged 18 and over. We do not knowingly collect data from children. If you believe a minor has provided us data, please contact us so we can remove it.

11. International transfers

Where data is processed outside Rwanda (for example by a cloud provider), we take steps to ensure it receives a level of protection consistent with Rwandan law.

12. Changes to this policy

We may update this Policy from time to time. Material changes will be posted on this page with a new “Last updated” date, and where appropriate we will notify you directly.